CVE-2024-21876

CVE-2024-21876 affects Enphase IQ Gateway (formerly Envoy). A path traversal vulnerability allows an unauthenticated attacker to access or create arbitrary files via a URL parameter. Affects Envoy versions 4.x–8.x and

CVE-2024-21878

The CVE-2024-21878 entry pertains to Enphase IQ Gateway (formerly Envoy), affected versions 4.x through 8.x, with an internal script that improperly neutralizes special elements, enabling OS command injection. The issue is described as a Command Injection vulnerability and is currently unpatched....

CVE-2024-21877

CVE-2024-21877 describes a path traversal vulnerability in Enphase IQ Gateway (formerly Envoy) that allows file manipulation via a URL parameter. Affected are Enphase IQ Gateway/Envoy versions 4.x through 8.0 and those

CVE-2024-21879

Enphase IQ Gateway (Envoy) is affected by CVE-2024-21879, a Command Injection vulnerability exploitable via a URL parameter on an authenticated endpoint. Affected versions are 4.x through 8.x and any version before 8.2.4225. The root cause is improper neutralization of special elements in the URL...

CVE-2024-21880

The CVE-2024-21880 issue affects Enphase IQ Gateway (4.x–7.x). It is an OS command injection via the url parameter of an authenticated endpoint, caused by improper neutralization of special elements. The connected PT security entry (PT-2024-19111) provides remediation guidance: update Enphase IQ ...